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The SENTINEL System was formulated to de- 
fend against the potential ICBM threat from both 
the Chinese People's Republic (CPR) and the 
USSR during the 1970s. The deployment decision 
limited its initial role to a complete area defense 
against a CPR industrial/urban attack on the Con- 
tinental United States (CONUS), and contained a 
growth option for defending certain U.S. ICBM 
bases against USSR attack. Damage prevention 
was the defense objective against a credible CPR 
attack while damage limitation was the defense 
objective against a future expanded CPR threat 
and against a USSR counterforce attack on major 
Minuteman installations. 


The SENTINEL System evolved from the 
NIKE-X program, specifically the I-67 System 
Study.'-? The objectives of this study were to: 

e Devise a defense against a countervalue 

attack with ICBMs from the CPR 


e Provide for defense against a counterforce 
attack with ICBMs and SLBMs from the 
USSR 

e Hold total system investment costs to $5 
billion 

@ Meet an Initial Operational Capability (IOC) 
date within 54 months of a deployment de- 
cision. (This requirement limiting the 
choice of system elements to NIKE-X 
equipment. ) 


The study concluded that a system consisting of 
modified NIKE-X subsystems deployed at 
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installations within CONUS and on Hawaii would 
meet these objectives. 


In September 1967, the decision was made to 
proceed with the development, production, and 
installation of this system — given the project 
name SENTINEL. Further studies led to rela- 
tively minor modifications of the components and 
deployment called for in the I-67 System Study. 
It was also decided to give first priorities to the 
installations necessary for an area defense 
against a CPR attack. This deployment would 
then be augmented later to defend Minuteman 
sites against a USSR attack. 


SYSTEM DESCRIPTION 


The SENTINEL System consisted of the follow- 
ing major subsystems: 


e Perimeter Acquisition Radar (PAR) and 
associated PAR Data Processor (PARDP) 
for long-range surveillance and tracking 
of attacking ICBMs 


@ Missile Site Radar (MSR) and associated 
Missile Site Data Processor (MSDP) for 
close-in target surveillance and tracking, 
and for command guidance of defensive 
missiles 


@ SPARTAN missiles With high-yield nuclear 
warheads for long-range intercepts 


e@ SPRINT missiles with low-yield nuclear 
warheads for close-in, fast response 
intercepts 


e A Command and Control structure linking 
these elements. 


Deployment 


The initial SENTINEL deployment, to provide 
an area countervalue defense of CONUS and 
Alaska, was to consist of 6 PARs, 16 MSRs, 480 
SPARTANS, and 192 SPRINTs. An additional 
MSR and 28 SPRINTs were to be provided for 
Hawaiian defense. The PARs would have their 
single arrays generally faced to the north. The 
MSRs would have one, two, or four array faces 
depending on their location and role in the de- 
fense. This initial deployment could grow to in- 
clude defense of strategic missile bases by the 
addition of 208 SPRINTs and modification of the 
data processing hardware and software at the 














This system was to be closely netted and would 
have the ability to modify its response to specific 
attacks. Overall command and control, admini- 
stration, and status of the system was to be ef- 
fected through netting of local and area defense 
centers and, these in turn, with the Continental 
Air Defense Command (CONAD). This deploy- 
ment is depicted in Figure 3-1. _ 


Area Coverage 


The area defense provided by the SENTINEL 
deployment involved nearly complete coverage of 
the contiguous United States, as well as parts of 
Alaska and Hawaii, against the defined CPR 
threat.‘ 


The defensive coverage planned for each 
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sites located near Minuteman bases. SPARTAN firing site is depicted in Figure 3-2. 
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Figure 3-1. Locations of Sites for SENTINEL Deployment 
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Figure 3-2. Ground Impact Area Coverage 


The contour shown encloses the impact points of 
attacking ICBMs which could be intercepted above 
the atmosphere by a SPARTAN launched from that 
site. In general, the coverage (sometimes called 
a "footprint") was limited in the forward direc- 
tion by the PAR detection range, and to the side 
and rear by a combination of missile capability 
and MSR scan limits.$ 


Achieving an effective area defense depends 
on the ability to search and detect objects at 
ranges that provide sufficient time to launch an 
interceptor at the attacking ICBM. This function 
of long-range search and detection would be per- 
formed by the Perimeter Acquisition Radar. 
Five PAR installations were to be located along 
the northern periphery of the United States, with 
one additional installation in Alaska. *’ The PARs 
would also have a verification and tracking ca- 
pability to provide trajectory information to the 
missile firing sites and to command and control 
centers. 
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The SPARTAN missile firing sites, each with 
an MSR, were located in sucha manner that their 
defended area footprints encompassed the entire 
CONUS. The SPARTAN firing site in Alaska 
provided a defense for most of the population 
there, while a SPRINT firing site on Hawaii pro- 
vided almost complete area coverage of Oahu. 


Collocated with each of the six PARs was a 
missile firing site using SPRINT to provide a 
high-confidence, terminal-intercept capability 
for the defense of these forward radars. 


Minuteman Defense Coverage 


The SENTINEL deployment called for growth 
to provide a terminal (SPRINT) defense of Minute- 
man squadrons at five bases. ** The deployment 
objective was the maximization of silo coverage 
and survival against a large USSR attack. 


The defense coverage to be provided, as con- 
trasted with area defense, was strongly depen- 
dent on the characteristics of the threat, the 
actual site locations, and the level of deployment. 
Of particular importance was the target commit 
altitude, i.e., the altitude of the target at the 
time of launching a defensive missile. The com- 
mit altitude was determined by radar coverage, 
system response against a specified threat, and 
defensive missile fly-out time. 


Remote launch of SPRINT was specified for 
the Minuteman defense sites to minimize fly-out 
time. These remote missile farms were located 
near the Minuteman silos at distances of about 25 
miles from the MSR. 


The SPARTAN missile, in addition to its area 
defense role, provided additional protection of 
Minuteman bases. : 


Command and Control 


Of importance to the system operation and re- 
sponse was the concept that Command and Control 
should be designedto allow appropriate authority to 
reside atthe lowest levelin the command hierarchy, 
consistent with the level at which available data 
would support system functions and decisions.!° 


The SENTINEL Command and Control is il- 
lustrated in Figure 3-3. The system was to op- 
erate under a three-level hierarchy of Command 


trol of an ACC. The MDC was responsible for 
MSR control, SPRINT command and control, 
and/or SPARTAN control.!° 


and Control headed by the Ballistic Missile De- 
fense Center (BMDC) which was the interface 
point between SENTINEL and CONAD. The BMDC 
was to be the command point through which the 
Commanding General of the Army Air Defense 
Command (ARADCOM) would exercise command 
and technical supervision over the SENTINEL Sys- 
tem.!! The BMDC was charged with defense of 
the entire United States through coordination 

with three Area Control Centers (ACCs) under 

its command./?_ The ACC responsibilities in- 
cluded PAR command and control,!3 MSR com- 
mand,!4 and SPARTAN command. Missile 
Direction Centers (MDCs) were grouped on an 
area basis with five or six MDCs under the con- 


The three ACCs were collectively responsible 
for three areas of CONUS. The boundaries be- 
tween areas were drawn to minimize SPARTAN 
coverage overlays and to provide necessary co- 
ordination. Each primary ACC had an alternate 
as shown in Figure 3-4 which illustrates the 
MDCs and PARs included in the command and 
control structure of ACC No. 2. Here, the pri- 
mary ACC was located at Warren AFB and the 
alternate was located at Whiteman. A failure at 
Warren resulted in a preplanned, progressive 
sequencing of control to Whiteman. 


Communication circuits were to be provided, 
for both voice and data, with two geographically 
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Figure 3-3. SENTINEL Command and Control Structure 
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Figure 3-4. Area Control Center Number 2 


separate paths required for all links. Inter- 
area communications were to be provided only 
between ACCs, with PAR data being sent to the 
BMDC via the ACC; MSR data were to be sent to 
the controlling ACC for inter-area MSR coordi- 
nation and threat evaluation. 


System Operation and Response 


Long-range surveillance and target tracking 
in the SENTINEL System were to be provided by 
the PAR. For urban defense, the SPARTAN was 
the primary interceptor and was tracked and 
guided by MSRs. Minuteman defense would be 
accomplished largely as a terminal defense with 
SPRINT, supplemented by SPARTANs, contribut- 
ing where they could be effectively brought to bear. 


Generally, targets would be detected first by 
the PARs and, after a few seconds of tracking, 
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trajectories and impact points would be deter- 
mined and an MDC designated. For SPARTAN 
intercepts, target information relative to inter- 
ception would be continually refined and passed 
to the appropriate point. The MSR, in some in- 
stances, would acquire and track the target 
prior to SPARTAN burst and thus reduce the 
intercept error. 


For SPRINT engagements, the PAR data 
would be passed to the assigned MDC for sub- 
sequent action once the local MSR had established 
track. For terminal defense, the MDC could 
act autonomously with the MSR providing target 
surveillance and acquisition, as well as target 
and missile track. 


For area defense, the SPARTAN engagement 
would be planned at the ACC and take into account 
blackout and fratricide constraints, defensive 
missile stockpile balance, and other restrictions. 


The ACC would determine effectiveness against 
possible follow-on attackers. Allocation thresh- 
olds would be set and the stockpile balance 

among SPARTAN firing sites adjusted according- 
ly. The intercept would be planned specifying the 
place, the time, and how many SPARTANs were 
to be used in meeting effectiveness criteria. 
Continuous evaluation of the engagement plan 
would be provided to ensure its adequacy. The 
BMDC would coordinate the roles of the ACCs and 
provide information on estimated future attack 
size and defense objectives. Implementation of 
the SPARTAN engagement plan would be per- 
formed by the MDC, including post-intercept 
evaluation for use at the ACC. 


For Minuteman defense, the BMDC would pro- 
vide information to the ACC as in area defense, 
together with any Minuteman silo coverage 
constraints on the defense. The ACC would de- 
termine the division of the total attack for 
SPARTAN and/or SPRINT engagement assign- 
ments. These assignments would be sent to the 
designated MDCs where engagement plans would 
be completed. Any conflicts involving fratricide 
or blackout between SPARTAN and SPRINT would 
be resolved by the MDC. The MDC would also 
select the SPRINT farm to be used and plan the 
engagement to achieve the effectiveness level 
specified by system objectives, including pref- 
erential defense of Minuteman and the SENTINEL 
complex. 


System Readiness Verification: 


The SENTINEL System design was strongly 
influenced by stringent availability/reliability 
objectives, that is, requirements for high prob- 
ability that the system would be available if an 
attack should occur, coupled with requirements 
for high reliability during an attack.!5-!* The 
design intent was to provide a built-in capability 
for comprehensive testing of all system elements 
to provide continuous confidence in the system's 
readiness to perform its mission. This led to 
requirements for developing a large array of 
subsystem, functional, and hardware tests. In 


addition, a system exerciser would test the fully- 
integrated system, partially by simulation. The 
collection of hardware and software required to 
provide this built-in test capability was referred 
to as System Readiness Verification (SRV).?° 


The SRV tests were oriented toward providing: 


e Verification that critical system perform- 
ance parameters were within specified 
limits 

@ Detection, isolation, and indication of 
hardware faults 


e Verification that the dynamic response of 
individual and collective sites (including 
hardware, software, and personnel) to 
design-level attacks was correct and that 
predetermined results were obtained. 

In the PAR and MSR, fault detection tests 
were designed to run cyclically during the radar 
pulse-cycle dead-time while the system was per- 
forming its major role. If test results did not 
meet specified limits, spare groups of equipment 
would be automatically switched in while monitors 
indicated the faulty equipment. Additional fault 
detection and isolation tests were provided for the 
off-line equipment. 


Data Processing System (DPS) hardware was 
checked by periodically scheduling units (proc- 
essors, mémories, etc.) off-line for testing by 
the Maintenance and Diagnostic Subsystem. A 
fixed set of tests was applied to each unit, re- 
sults analyzed, and, in most cases, the fault 
identified. 

For SPRINT and SPARTAN, special test pro- 
grams were periodically run in the DPS to , 
exercise missile subsystem hardware via normal 
interface channels. Monitors would indicate if the 
tests were unsuccessful and additional tests would 
be run to isolate the fault. 


A System Exerciser provided the means for 
additional testing of system hardware as well as 
for exercising the tactical software (known as the 
weapons system process). This was accom- 
plished by partitioning the DPS equipment at each 
site into two separate data processors — one to 
simulate a specified threat and the other to re- 
spond as during a real engagement. During an 
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exercise, the simulator would generate radar 
returns representing the preselected attack for 
injection into the radar receivers. The system 
would respond in a normal manner except that 
simulated defensive missiles would be launched 
and guided under control of the weapons system 
process. The results of the exercise would be 
checked to make certain that the engagement 
proceeded as expected. 


The System Exerciser concept also provided 
the means for developing and testing software in 
the SENTINEL Data Processing Laboratory 
(SDPL) at Whippany, where site equipment was 
either duplicated or simulated. Similarly, the 
System Exerciser would provide the major tool 
for integrating and testing software at tactical 
sites. 


SYSTEM REQUIREMENTS AND DEVELOPMENT 


Documentation 


The basic requirements for the SENTINEL 
System and its major components were developed 
during the initial system studies (e.g., I-67 Sys- 
tem Study) and refined during the first phase of 
system development following the deployment de- 
cision. These requirements evolved into a hier- 
archy of performance/design specifications which 
were to be prepared by Bell Laboratories and 
approved and placed under configuration- 
management control by the Army.?! The func- 
tional organization and objective of these speci- 
fications were: 


e SENTINEL System Specification — included 
threat parameters, overall performance 
requirements, deployment plan, radar and 
missile types and locations, and a list of 
sub-specifications. 


e Hardware Oriented Specifications — one 
each for the PAR, MSR, BMDC, Data 
Processor, and SPARTAN and SPRINT 
with their associated equipment; perform- 
ance requirements and design character- 
istics were included in each document. 


e Specifications for Maintenance Facilities — 
stipulated requirements for Test Equip- 
ment, Maintenance Data System, and Sys- 
tem Readiness Verification. 


e Software Oriented Specifications — one 
each for the programs in the MSDP, 
PARDP, BMDC, and System Readiness 
Verification; requirements for inputs, out- 
puts, operations, and major functions were 
included in each document. 


These specifications were also used in the 
contractual requirements placed on the major 
subcontractors for the radars and missiles. - 


System Engineering 


System engineering activities were primarily 
concerned with definition, documentation, and 
specification of the SENTINEL System operational 
requirements. Simulations were developed for 
evaluating tactical concepts and system effective - 
ness? A mathematical model was prepared to 
simulate, in a computer, the proposed SENTINEL 
deployment to evaluate the complete system de- 
sign and interaction among its various parts .23-?? 
As data from MSR and MSDP tests at Meck Island 
and from SPRINT and SPARTAN firings became 
available, they were introduced into the simula- 
tion to increase the accuracy of results. 


Missile Site Radar 


The Missile Site Radar (MSR), an S-band 
single-beam, phased-array radar, was used 
with the Missile Site Data Processor (MSDP) to 
perform surveillance and limited discrimination, 
track of reentry targets, and track and command 
guidance of SPRINT and SPARTAN missiles.2* 
The Raytheon Company, Bedford, Mass., was 


. the MSR subcontractor with Bell Laboratories 


providing overall direction, design control, and 
assistance in critical areas. 


The MSR was structurally a part of the Mis~ 
sile Site Control Building which also housed the 
MSDP. It was designed to have one, two, or 
four antenna faces inclined 51.5 degrees from the 
horizontal. Each face was used for both trans- 
mitting and receiving, with a single transmitter 
and a single receiver time-shared among faces. 
The transmitter (up to the final klystron ampli- 
fiers) and the receiver had duplicate equipment 
and automatic switching for redundancy. The two 


final klystron amplifiers were operated in 
parallel] but also could operate alone at reduced 
power. Face switching and beam forming and 
steering were computer controlled. 


With the change to SENTINEL, the autonomous 
role of the MSR was expanded, thus necessitating 
major changes to upgrade its tracking capability. 
An example of this change was the required five- 
fold increase in its output average power level. 

A prototype MSR with two array faces was con- 
structed on Meck Island and tested extensively. 
This test program provided significant data use- 
ful in the design of the follow-on SAFEGUARD 
System. 


Perimeter Acquisition Radar 


The Perimeter Acquisition Radar (PAR), a 
single-beam, phased-array radar, was used 
with the PAR Data Processor (PARDP) to per- 
form long-range surveillance, target verifica- 
tion, and tracking of attacking ICBMs.2? The 
requirements specified a maximum detection 
range sufficient to allow time for SPARTAN 
missiles to intercept warheads outside the at- 
mosphere, The PAR initially was planned as an 
“off the shelf’ VHF-band radar, but following.a 
study on the effects of nuclear blackout,* the 
frequency was changed to the UHF band, necessi- 
tating an extensive redesign program. 


PAR was designed to operate in a hostile en- 
vironment consisting of false targets (aircraft, 
satellites, meteors, or aurora), clutter signals 
(from the ground, chaff, or aurora), and nuclear 
disturbances (electromagnetic pulses, blast 
waves, ground shock, thermal radiation, and 
other radiation from nuclear weapons). 


Development of the PAR was divided into 
three phases as follows: 


PhaseI — Performance definition and equip- 
ment specification 
Phase I — Design and manufacture of a pro- 


totype at a site near Boston 


Phase II — Production and deployment of 
the remaining five radars. 
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The General Electric Company, Syracuse, 
New York, was responsible for PAR development 
under subcontract to Bell Laboratories. At the 
time the decision was made to reorient SENTINEL 
System development to SAFEGUARD objectives, 
the prototype site near Boston was underway and 
had to be moved to Cavalier, North Dakota. 


SPRINT Missile Subsystem 


SPRINT, a two-stage, solid-propellant 
missile, was the interceptor for terminal de- 
fense in the SENTINEL System. It was de- 
signed to be extremely fast reacting and capable 
of delivering a nuclear warhead to an intercept 
point, at short ranges, within seconds after 
launch}! 


Development test firings of SPRINT were 
first conducted at White Sands Missile Range as 
part of the NIKE-X program. Later SPRINT 
launches at Meck and Illeginni Islands were con- 
ducted using SENTINEL MSR/MSDP guidance in 
SAFEGUARD System missions. 


The Martin Marietta Corporation, Orlando, 
Florida, was the subcontractor to Bell Labora- 
tories for development of SPRINT. Missile- 
borne guidance equipment was developed by Bell 
Laboratories and manufactured by Western 
Electric. 


SPARTAN Missile Subsystem 


The SPARTAN missile, in its primary role, 
provided long-range, large-payload, intercept 
capability against exoatmospheric targets.” 

The three-stage missile employed booster and 
sustainer motors to achieve peak velocity and a 
third-stage controllable jet motor for final inter- 
cept control. 


Design and development of SPARTAN was the 
responsibility of the McDonnell Douglas Corpor- 
ation, Santa Monica, California, under subcon- 
tract to Bell Laboratories. Guidance equipment 
for SPARTAN was developed by Bell Laboratories 
and manufactured by Western Electric. 
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Many of the basic design features of the NIKE- 
ZEUS DM-15C missile were used in SPARTAN. 
Design emphasis for use in SENTINEL was con- 
centrated on those areas in which changes had to 
be made to carry a heavier warhead for the 
longer range, barrage-type function of SPARTAN. 


The SPARTAN missile development flight-test 
program began at Kwajalein in March 1968 and 
continued into 1969. Use of SPARTAN in 
SAFEGUARD system missions began in April 1970. 


Data Processing 


Each SENTINEL installation included a Data 
Processing Subsystem which controlled the 
functioning of its radar (PAR or MSR), analyzed 
attacks, allocated system resources, and com- 
manded the launch and guidance of interceptor 
missiles 33 


Two R&D versions of partial data processing 
subsystems were installed: the SENTINEL Data 
Processing Laboratory (SDPL) at Whippany, and 
a minimum Missile Site Data Processing Subsys- 
tem (MSDPS) at Meck. The SDPL was uded for 
equipment evaluation and software program de- 
velopment; the MSDPS was integrated with the 
MSR and used for MSR testing and performance 
verification. 

The DPS hardware was of modular design to 
permit sizing to meet requirements of the proc- 
essing tasks associated with each deployed site. 
The design was standardized so that any number 
of processors could be combined with any number 
of storage units to meet the requirements of a 
given site. 


Most equipment was designed, developed, and 
manufactured by Bell Laboratories and Western 
Electric. Lockheed Electronics produced core 
memory systems for program and variable 
stores. 


Software 


The basic tactical functions of the SENTINEL 
System were embodied in the software programs 
which would drive the data processors at each 
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site. These tactical functions were to be imple- 
mented in three generic weapons processes — 
one each for the PAR, MSR, and BMDC, Ver- 
sions of these processes would be used at the 
various sites, with each version site-unique and 
capable of operating only in the DPS at the site 


for which it was designed.?4 


The Weapons Process requirements were 
specified in Data Processing System Performance 
Requirements (DPSPRs), prepared as a result 
of system engineering and analysis of overall 
system objectives. These documents specified 
the fundamental concepts, functional require- 
ments, and constraints for SENTINEL System 
deployment. In addition, requirements for 
software-driven equipment tests and readiness 
verification were included. 


The plan for development of SENTINEL weap- 
ons processes as well as other software required 
at the tactical sites included development of 
tactical support software.353* In this category 
were: 

e Program Preparation Facilities — includ- 


ing all tools necessary to assemble, 
maintain, and construct a process 


e Program Execution Facilities — including 
the basic DPS management facility andthe 
Tactical Operating System 


e DPS Test and Maintenance Facilities — 
including provisions for maintenance of 
DPS hardware and diagnosis of faults. 


Software development also included special 
installation software packages for use during in- 
stallation and testing of SENTINEL site hardware. 
Three types of installation software were to be 
developed: (1) the DPS Installation Test Facility, 
(2) the PAR Installation Process, and (3) the 
MSR Installation Process. 


In addition, software processes were devel- 
oped for the Meck Test System. The initial 
software provided for Meck was much like the 
DPS and MSR Installation Processes. A soft- 
ware process, referred to as M-1, was an 
early prototype for the tactical MSR Weapons 
Process and provided the method for exercising 
the MSR, MSDP, and missile subsystems. 


Testing 


Major testing for the SENTINEL System was 
conducted with the Meck Test System which 
consisted of the MSR, MSDP, SPARTAN, and 
SPRINT subsystems.? The purpose of the Meck 
test program was to: 

e Exercise and evaluate all elements of the 

subsystems installed 


e Achieve SPRINT and SPARTAN intercepts 
against high-performance targets of known 
and controlled characteristics 


e Permit study and evaluation of man's role 
in augmenting system responses 


e Gather data applicable to the continuing de- 

sign effort. 

The test plan was directed toward evaluating 
those functions related specifically to SENTINEL 
deployment. This plan involved several phases 
‘of system testing at Meck Island. The M-0 phase 
used sets of comparatively small software pack- 
ages to facilitate checkout of the radar, data 
processor, missile subsystems, and the inter- 
faces between subsystems. The M~-1 phase pro- 
vided initial tactical functional capabilities re~ 
quired in the area defense role, including the 
first MSR-guided SPARTAN and SPRINT inter- 
cepts. Subsequent phases were to be designed 
with the functional capability required to test 
against the growth threat and to evaluate hard- 
site defense. 


SUMMARY AND CONCLUSIONS 


In the total story of ABM development, the 
SENTINEL System is but one brief chapter. Al- 
though not actually deployed, SENTINEL was sig- 
nificant in that it was the first ABM system on 
which an affirmative decision to deploy was made. 
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This decision initiated development and other re- 
lated activities not addressed as specifically, or 
in as much depth, for earlier systems. Not sur- 
prisingly, some of these activities turned up im- 
portant problems that required significant atten- 
tion and therefore became important conclusions 
in the planning for SAFEGUARD. 


Because the SENTINEL System evolved into 
the SAFEGUARD System, rather arbitrary judg- 
ments were required to identify the conclusions, 
or lessons learned, from SENTINEL. The follow- 
ing list emphasizes those items which relate only 
to SENTINEL, or which were clearly highlighted 
before the transformation to SAFEGUARD. 


e It became very clear that development, 
testing, and integration of the large and 
complex software programs required for 
the system seriously affected successful, . 
on-schedule completion of the project. 
This led to an intensive effort to expedite 
the software development for SAFEGUARD. 
The technical and management procedures 
which resulted are described in Chapter 4, 
SAFEGUARD System, and Part III, Man- 
agement and Overall Approach. 


e Providing adequate confidence that the sys- 
tem was operational emerged as a difficult 
task. The design of an extensive built-in 
System Readiness Verification subsystem 
therefore became an important part of the 
system design. 


e Specification of requirements for positive 
nuclear control having a very short reaction 
time necessitated a complex interface with 
the various organizations involved. 


e A complex Command and Control System 
was required to internet the elements of 
the SENTINEL deployment. The unique 
requirements of SENTINEL made the de- 
sign of such a system difficult. 


e An organization of Configuration Control 
Boards was established to provide a Con- 
figuration Management System to control 
the requirements for the many elements 
of the SENTINEL System. 











